From 477e87f078b98ca824d216a7fcf8b32d130924cd Mon Sep 17 00:00:00 2001 From: naddy Date: Tue, 22 Feb 2005 15:37:51 +0000 Subject: Document unace-1.2b vulnerabilities: buffer overflows, directory traversal. --- security/vuxml/vuln.xml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 99f333f3b497..a98e5e6443a0 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,38 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> + + unace -- multiple vulnerabilities + + + unace + unace-1.2b_2 + + + + +

Ulf Härnhammar reports multiple security vulnerabilities + in unace-1.2b:

+
    +
  • There are buffer overflows when extracting, testing or + listing specially prepared ACE archives.
    • +
  • There are directory traversal bugs when extracting ACE + archives.
    • +
  • There are also buffer overflows when dealing with long + (>17000 characters) command line arguments.
    • +
+ + + + CAN-2005-0160 + CAN-2005-0161 + + + 2005-02-14 + 2005-02-22 + + + putty -- pscp/psftp heap corruption vulnerabilities -- cgit